Read the docs

galaxyproject

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

galaxyproject records in CISA KEV

No galaxyproject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Galaxy 7 records MEDIUM

Records

7 records in Galaxy · all components

TI-2015-07990 CVE-2015-10062 · GHSA-wgpq-5gwx-2wxh

galaxy-data-resource Command Line Template injection

Priority MEDIUM 44

A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00933 Published 2023-01-17 No fix listed CWE-74
TI-2024-28338 CVE-2024-42351

Possible Data Tampering & Loss of Public Datasets in Galaxy

Priority MEDIUM 40

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00454 Published 2024-09-20 Fixed in 21.05 CWE-200
TI-2024-28333 CVE-2024-42346

Stored Cross Site Scripting (Stored XSS) in Galaxy

Priority LOW 35

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00768 Published 2024-09-20 Fixed in 24.1.1 CWE-79
TI-2018-15916 CVE-2018-1000516 · GHSA-qqr6-vm23-m488

The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of…

Priority LOW 29

The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, wh…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01051 Published 2018-06-26 Fixed in 14.10.1, 15.01 CWE-79
Open these records in search →